CheckPoint Check Point Certified Security Administrator R80

QUESTION NO: 1
What are the two types of NAT supported by the Security Gateway?

A. Destination and Hide B. Source and Destination C. Static and Source D. Hide and Static

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
R80.10 management server can manage gateways with which versions installed?

A. Versions R76 and higher B. Version R75 and higher C. Versions R75.20 and higher D. Versions R77 and higher

Correct Answer: A

QUESTION NO: 3
What is the purpose of the Clean-up Rule?

A. To eliminate duplicate log entries in the Security Gateway B. To remove all rules that could have a conflict with other rules in the database C. To log all traffic that is not explicitly allowed or denied in the Rule Base D. To clean up policies found inconsistent with the compliance blade reports

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
Which of the following ClusterXL modes uses a non-unicast MAC address for the cluster IP address?

A. High Availability B. Load Sharing Pivot C. Master/Backup D. Load Sharing Multicast

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
In Unified SmartConsole Gateways and Servers tab you can perform the following functions EXCEPT
________.

A. Open WebUI B. Upgrade the software version C. Open SSH D. Open service request with Check Point Technical Support

Correct Answer: C

QUESTION NO: 6
Which feature is NOT provided by all Check Point Mobile Access solutions?

A. Secure connectivity B. Granular access control C. Support for IPv6 D. Strong user authentication

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
In which VPN community is a satellite VPN gateway not allowed to create a VPN tunnel with another satellite VPN gateway?

A. Combined B. Meshed C. Pentagon D. Star

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
Which of the following describes how Threat Extraction functions?

A. Detect threats and provides a detailed report of discovered threats B. Delivers PDF versions of original files with active content removed C. Delivers file with original content D. Proactively detects threats

Correct Answer: D

QUESTION NO: 9
Which is the correct order of a log flow processed by SmartEvent components:

A. Firewall > Log Server > SmartEvent Server Database > Correlation Unit > SmartEvent Client B. Firewall > Correlation Unit > Log Server > SmartEvent Server Database > SmartEvent Client C. Firewall > SmartEvent Server Database > Correlation Unit > Log Server > SmartEvent Client D. Firewall > Log Server > Correlation Unit > SmartEvent Server Database > SmartEvent Client

Correct Answer: D

QUESTION NO: 10
Which deployment adds a Security Gateway to an existing environment without changing IP routing?

A. Bridge Mode B. Remote C. Distributed D. Standalone

Correct Answer: A

QUESTION NO: 11
Fill in the blank: By default, the SIC certificates issued by R80 Management Server are based on the
____________ algorithm.

A. SHA-128 B. MD5 C. SHA-200 D. SHA-256

Correct Answer: D

QUESTION NO: 12
How would you deploy TE250X Check Point appliance just for email traffic and in-line mode without a Check Point Security Gateway?

A. Install appliance TE250X on SpanPort on LAN switch in MTA mode B. It is not possible, always Check Point SGW is needed to forward emails to SandBlast appliance C. You can utilize only Check Point Cloud Services for this scenario D. Install appliance TE250X in standalone mode and setup MTA

Correct Answer: C

CheckPoint Check Point Certified Security Administrator R80 - 156-215.80 Exam Questions